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WHAT IS CLAIMED IS: 

1. A control information rewriting system for a vehicle 

i ' 

fconjprising; 

an electronic control unit mounter in the vehicle for 
a vehicle control and having control information stored in 
electrically rewritable nonvolatile mempry for the vehicle 
control; 

a rewriting device connectab&e to the electronic 
control unit for rewriting the control /information; and 

a control center for performing data communication 
with the rewriting device, 

wherein the control center includes 

storing means storing tjpe predetermined access 
information, identification information of the rewriting device 

. / . . . . 

and associated information associated with the identification 
information, and 

legitimacy determining J means for acquiring the 
identification information and the associated information of the 
rewriting device in data communication with the rewriting 
device, and transmitting and not transmitting access information 
stored in the storing means to /the rewriting device when an 
association relationship of the acquired information matches and 
does not match an association relationship stored in the storing 
means thereby to enable and disable rewriting operation of the 
rewriting device, respectively! 
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2 . The control information rewriting system as in g±ai_m 
1, wherein: 

the rewriting device acquires from the contro/ center 
as the access information a function f specific to a/tunction 
F stored in the electronic control unit, and transits to the 
electronic control unit a function value f(r) specific to a 
predetermined value r transmitted from the electronic control 
unit; and 

the electronic control unit determines that the 
rewriting device is legitimate if a function/ value F(f(r)) 
specific to the function value f(r) transmitted from the 
rewriting device corresponds to the transmitted predetermined 
value r. 




3 . The control information rewriting system as in claim 
2, wherein: 

the predetermined value r is a^random number generated 
by the electronic control unit, 

4 . The control information rewriting system as in claim 
1, wherein: 

the electronic control/unit refuses access from the 
rewriting device for a fixed? period, when determining a 
predetermined number of times ^that the rewriting device is not 
legitimate. 
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5. The control information rewriting system afi in claim 
1, wherein: 

the associated information is inputted to the 
rewriting device by a user every time a state/ wherein data 
communication with the control center is/ possible is 
established; and 

the rewriting device transmits/ the associated 
information inputted by the user to the control center together 
with the identification information. 

6. The control information rewriting system as in claim 

1, wherein: t 

If 
// 

a data communication possible state is established 



/ 



between the control center and the rewriting device by way of 
a telephone network; and 

the control center acquits the telephone number of the 
rewriting device as the associated information , when the data 
communication possible state is/established . 

7. The control informat/ion rewriting system as in claim 
1, wherein: 

the control center refuses access from the rewriting 



device for a fixed period when non-matching of the association 

/ 

relationship is determined by the legitimacy determining means 

/ 

a predetermined number of times . 
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8. The control information rewriting system as in claim 
1, wherein: 

the control center further includes ihodif ication data 
storing means storing modification data / of the control 
information; and 

the control center transmits the Modification data to 
the rewriting device when the electronic cojitrol unit determines 
that the rewriting device is legitimate*, 

9. The control information rewriting system as in claim 
8, wherein: 



/ 



the electronic control unit transmits vehicle 

/ 

information to the rewriting device when determining that the 
rewriting device is legitimate; and 

the control center further? includes update history 
storing means storing an update |history of the control 
information pertaining to the vehicle, refers to the update 

/ 

history stored m the update historj storing means on the basis 
of the vehicle information when the vehicle information from the 
electronic control unit is transmitted by the rewriting device, 
determines necessity of rewriting lot the control information in 
that vehicle, and transmits the modification data to the 

10. The control information rewriting system as in claim 
1, wherein: 

the control center up'dates update history specific to 
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the vehicle when rewriting of control informatio/ is completed 
by the electronic control unit. 

11 . The control information rewriting System as in claim 
1, wherein: 

the rewriting device erases the predetermined access 

/ 

information when rewriting of the control information is 
completed by the electronic control unit/. 

12. The control information rewritfing system as in claim 
1, wherein: 

the rewriting device stops rewriting of the control 
information after a data communication possible state is 

/ 

established between the rewriting devicfe and the control center, 
if. data communication between the Rewriting device and the 
control center becomes impossible ^before rewriting of the 
control information is completed by thL electronic control unit. 



13. A control center for communication with a control 

i 

information rewriting device which rewrites control information 
stored in a nonvolatile memory, the| control center comprising: 
storing means storing associated information 
associated with identification information of the rewriting 

device; and 1 

I 

legitimacy determining! means for acquiring the 
associated information of the! rewriting device in data 
communication with the rewriting! device, and transmitting and 




not transmitting rewriting permission to tkfe rewriting device 
when an association relationship of the acquired identification 
corresponds and does not correspond/ to the associated 
information stored in the storing means/ respectively, thereby 
to control rewriting operation of the ^rewriting device. 



14. The control center as in cl^aim 13, wherein; 

the storing means stores a History of rewriting of the 
control information . 



15. The control center as in claim 13, further comprising: 
control information / transmitting means for 
transmitting modification data o^f the control information to the 
rewriting device. 



16. The control center afe in claim 14, further comprising: 
determining means// for determining whether the 
modification data should be transmitted to the rewriting device 
based on the history stored! in the storing means. 



17 



The control center as in claim 14, further comprising: 



/ 



history updating means for updating the history stored 

I 

in the storing means when receiving data of completion of control 

/ 

information rewriting from the rewriting device. 



18. A control center for communication with a control 



information rewriting device which rewrites control information 
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stored in an electronic control unit, /the control center 
comprising : 

a processing unit programmed 7 to receive information 
specific to the electronic control/ unit from the rewriting 
device, determine a modif icatiory data to which the control 
information is to be rewritten/ and transmit the determined 
modification data to the rewriting device. 
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19. The control center as in claim 18,/ wherein: 

the processing unit is further programmed to determine 
whether the rewriting device is legit irfate, and permit the 
rewriting device to rewrite the modification data only when 
determining that the rewriting device/is legitimate. 




further comprising: 
ation information of 



20. The control center as in clfaii 
storing means storing intent 
the rewriting device , 

wherein the processing unit is further programmed to 
compare an association relation of identification information 
and association information ^acquired from the rewriting device 
with an association relation stored in the storing means, and 
determine that the rewriting device is legitimate when the 
compared association relations match 




21. The control center as in claim/18, wherein: 

the processing unit is f urthei/programmed to update a 
history of rewriting operation of the/ rewriting device. 
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22. The control center as in claim 21 , wKerein: 

the processing unit is further prog^mmed to determine 
whether rewriting of the control information is necessary by 
referring to the history of rewriting operation based on the 
information specific to the electronic control unit and received 
from the rewriting device, and transmit^.nformation indicative 
of completion of the rewriting operation to the rewriting device 
when determining that rewriting is not necessary. 



23. A rewriting device for rewriting control information 
stored an electronic control unit ^while communicating with an 
external device, the rewriting device comprising: 

receiving means for receiving a rewriting permission 
from the external device; and 

control information transmitting means for acquiring 
the control information from the external device after executing 

. . / 

predetermined processing with'/ the electronic control unit in 
response to the rewriting permission, and transmitting the 
control information to the electronic control unit. 



24. The rewriting device as in claim 23, further 

f 

comprising: j 

identification information transmitting means for 

i 

transmitting identification information of the rewriting device 



to the external device, soj' that the external device transmits 
the rewriting permission when the identification information is 
appropriate . 
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25. A rewriting device for rewr 
stored an electronic control unit with 
communicating with an external device, 
comprising: 

specific information receivin 
specific information from the electron 

specific information tr^nsm 
transmitting the specific informati 

modification data receivim 




1 information 
ion data while 
iting device 



for receiving 
unit; 

means for 
external device; 
receiving from 



the external device the modification data corresponding to the 
specific information; and 

control information transmitting means for 
transmitting the modif icatioja data to the electronic control 
unit . 



26. A control information rewriting system fpr a vehicle 
comprising : 

an electronic control unit mounted in/the vehicle for 
a vehicle control and having control information stored in 



/ 



electrically rewritable nonvolatile memoj?y for the vehicle 
control; 

a rewriting device connectaBle to the electronic 
control unit for rewriting the control information by using 
predetermined access information; a^tid 

a control center for performing data communication 
with the rewriting device, 

wherein the rewriting^ device converts data received 
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from the electronic control unit based 
upon receiving the access information 
and transmits the converted data to the 



on 




co 



s information 
ntrol center 
control unit. 



27. The control information rewriting system as in claim 
26, wherein: 




the rewriting device erases the access information 



z. 



received from the control center after rewriting has been 
completed normally in the electronic control unit. 




28. An electronic abntrol unit/for rewriting information 



with control information transmitted from a rewriting device, 
the unit comprising: 

storing means storing ithe information; 
transmitting means / for A transmitting specific 
information specific to the /electr/)$ic control unit to the 
rewriting device; 

receiving means iojc receiving the control information 
selected based on the specific information from the rewriting 
device; and 

rewriting means/ for rewriting the control information 
in the storing means 



29. The electronic control unit as in claim 28, further 
comprising: 

legitimacyidetermining means for determining whether 
the rewriting device? is legitimate and allowing the transmitting 
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means to transmit the specific information to the rewriting 
device only when the legitimacy igf determined. 

30. A control information rewriting system -for a vehicle 
comprising : 

an electronic control unit mounted in/the vehicle for 
a vehicle control and having control information stored in 
electrically rewritable nonvolatile memory/ for the vehicle 
control; 

a rewriting device connectable/ to the electronic 
11 control unit for rewriting the control /information by using 

fy predetermined access information; and 

01 a control center for performing data communication 

01 with the rewriting device, / 

M wherein the electronic control unit determines whether 

O the rewriting device is legitimate by receiving information 

□ which is formed by the rewriting/ device based on the access 

information received from the control center. 

31. The control information rewriting system as in claim 
30, wherein: 

the electronic control unit outputs predetermined data 
to the rewriting device, ^receives converted data which is 
converted from the predetermined data by the rewriting device 
based on the access information, and determines the legitimacy 
of the rewriting device by determining whether the converted data 

/ 

is formed from the predetermined data. 
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32. The control information rewriting system as in claim 
30 , wherein: 

the electronic control unit is set tfo a condition for 
waiting for an input of the control information to be rewritten 
into the nonvolatile memory when determining that the rewriting 
device is legitimate. 




33. The control information rewriting system as in claim 
30, wherein: 

the electronic control \dnit transmits specific 

/ 

information specific to a vehicle to/ the rewriting device; and 
the rewriting device / determines the control 
information to be transmitted to /the electronic control unit 
based on the specific informatioi 

34. The control information rewriting system as in claim 
33, wherein: 

the control information to be transmitted to the 
electronic control unit is determined by the control center based 
on the specific information. 



35. A control information rewriting system for a vehicle 

/ 

comprising: b 

an electronic control unit mounted in the vehicle for 
a vehicle control and ^having a control program stored in 
electrically rewritable nonvolatile memory for the vehicle 
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le electronic 
and 

communication 



control; 

a rewriting device connecta 
control unit for rewriting the control 

a control center for perf 
with the rewriting device, 

wherein the control center is programmed to determine 
whether the control program is normal by checking whether a check 
sum of the control program transmitted from the electronic 

control unit through the rewriting device along with a vehicle 

/ 

specific information, and/transmit a new control program to the 
rewriting device so tha£ the new control program is rewritten 
in the nonvolatile n^emory when determining that the control 
program is abnormal 
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